Implementing EFS

The first step in implementing Encrypted File System is to encrypt the files you would like to protect. This is done very easily and Microsoft has integrated the feature into the Windows shell.

Encrypting a File or Folder with EFS

1. Browse to a file or folder in either My Computer or Explorer, right-click and choose Properties...
2. Click the Advanced... button.
3. Put a check mark in the box that says Encrypt contents to secure data and click OK.
4. Click OK to close the Properties dialog.
5. If you are changing a folder that already contains files, you will receive a confirmation dialog. Click OK.

You can easily distinguish between encrypted and unencrypted files in My Computer or Windows Explorer. Encrypted files will be listed in green. This allows you to tell at a glance whether or not your files are still secure. It's also worth noting that encryption can be added in conjunction with other file attributes.

Next, you need to determine if any other users should be allowed access. If so, they need to be added.

Allowing Multiple User Access to Protected Files

1. Right-click the file and choose Properties...
2. Click Advanced and then click Details.
3. Click the Add button to allow additional users.

While setting up additional users, you should also take the time to select your Data Recovery Agents. This will help prevent data loss as I described earlier in this article.

The Encryption Details dialog box is not available for folder objects. You must allow multiple users and select recovery agents on a file-by-file basis.